Microsoft IIS 6.0 PHP NTFS Stream Authentication Bypass
High Nessus Plugin ID 59817
The remote web server is affected by an authentication bypass vulnerability.
The version of Microsoft IIS installed on the remote host is affected by an authentication bypass vulnerability. It is possible to access PHP files in protected web directories without authentication by appending '::$INDEX_ALLOCATION' to the directory name.